web2-recon

67 / 100 · Review before installing

Check before installing.

By iradoweck/antigravity-awesome-skills (GitHub) · other · 30 stars · scanned at commit 2984de1

Web2 recon pipeline

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this.

Found in 15 places.

skills/web2-recon/SKILL.md, line 41export CHAOS_API_KEY # then set your ProjectDiscovery Chaos API key as the value
skills/web2-recon/SKILL.md, line 83TARGET="target.com"
skills/web2-recon/SKILL.md, line 126TARGET="target.com"

Show 12 more

skills/web2-recon/SKILL.md, line 145cat /tmp/urls.txt | grep -E "[?&] (id|user|file|path|url|redirect|next|src|token|key|api_key)=" | tee /tmp/interesting-params.txt
skills/web2-recon/SKILL.md, line 164cat /tmp/urls.txt | gf xss | tee /tmp/xss-candidates.txt
skills/web2-recon/SKILL.md, line 181source ~/tools/SecretFinder/.venv/bin/activate
skills/web2-recon/SKILL.md, line 198source ~/tools/LinkFinder/.venv/bin/activate
skills/web2-recon/SKILL.md, line 217ffuf -u "https://target.com/FUZZ" \
skills/web2-recon/SKILL.md, line 278curl -sI https://target.com | grep -iE "server|x-powered-by|x-aspnet|x-runtime|x-generator"
skills/web2-recon/SKILL.md, line 319TARGET="target.com"
skills/web2-recon/SKILL.md, line 342REPO="TargetOrg/target-app"
skills/web2-recon/SKILL.md, line 366cat /tmp/live.txt | awk '{print $1}' | naabu -port 80,443,8080,8443,3000,4000,5000,8000,8888,9000,9090,9200,6379 -silent | tee /tmp/open-ports.txt
skills/web2-recon/SKILL.md, line 377pip install trufflehog3 2>/dev/null || true
skills/web2-recon/SKILL.md, line 396TARGET_ORG="TargetOrgName" # Check their GitHub org
skills/web2-recon/SKILL.md, line 437cat scope.txt # target list from the authorized engagement brief

Changes files outside its own folder

The author does not mention this.

Found in 3 places.

skills/web2-recon/SKILL.md, line 43echo 'export CHAOS_API_KEY # then set your ProjectDiscovery Chaos API key as the value' >> ~/.zshrc
skills/web2-recon/SKILL.md, line 49mkdir -p ~/.config/subfinder
skills/web2-recon/SKILL.md, line 50cat > ~/.config/subfinder/config.yaml << 'EOF'

Sends data to these websites: crt.sh, dns.projectdiscovery.io, target.com, api.github.com, $target

This is disclosed by the author in the skill's SKILL.md or README.

Found in 11 places.

skills/web2-recon/SKILL.md, line 86curl -s "https://crt.sh/?q=%.${TARGET}&output=json" \
skills/web2-recon/SKILL.md, line 93curl -s "https://dns.projectdiscovery.io/dns/$TARGET/subdomains" \
skills/web2-recon/SKILL.md, line 278curl -sI https://target.com | grep -iE "server|x-powered-by|x-aspnet|x-runtime|x-generator"

Show 8 more

skills/web2-recon/SKILL.md, line 323curl -s "https://dns.projectdiscovery.io/dns/$TARGET/subdomains" \
skills/web2-recon/SKILL.md, line 345CURRENT=$(curl -s "https://api.github.com/repos/$REPO/commits?per_page=1" | jq -r '.[0].sha')
skills/web2-recon/SKILL.md, line 352curl -s "https://api.github.com/repos/$REPO/commits/$CURRENT" \
skills/web2-recon/SKILL.md, line 388wget -q -r -l 1 -A "*.js" -P /tmp/js-files/ "https://$TARGET" 2>/dev/null
skills/web2-recon/references/details.md, line 73resp=$(curl -s -L -m 5 -o /tmp/body \
skills/web2-recon/references/details.md, line 254curl -s "$url" | grep -oE 'src="[^"]+\.js"' | sed 's/src="//;s/"//'
skills/web2-recon/references/details.md, line 259curl -s "$j" | grep -oE '[a-z0-9.-]+\.(io|app|one|dev|test|cloud|ai|co)' | sort -u
skills/web2-recon/references/details.md, line 283`curl -sI <host>` headers are 80% of the fingerprint:

Downloads and installs other software

The author does not mention this.

Found in 2 places.

skills/web2-recon/SKILL.md, line 377pip install trufflehog3 2>/dev/null || true
skills/web2-recon/references/details.md, line 49The projectdiscovery Go binaries (`dnsx`, `httpx`, `naabu`) occasionally `SIGSEGV` on macOS arm64 due to a cgo / system-resolver interaction. The crash signatur

Safer alternatives

Low-risk skills in the same category (other) that look related. Check that one does what you need.

Other copies in this repository

iradoweck/antigravity-awesome-skills has 2 more folders with a skill named web2-recon. This page shows the lowest-scoring copy.

plugins/agentic-awesome-skills/skills/web2-recon 67/100 · Review before installing
plugins/agentic-awesome-skills-claude/skills/web2-recon 67/100 · Review before installing

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'web2-recon' ] || [ -L ~/.agents/skills/'web2-recon' ]; then echo 'A skill folder named web2-recon already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/iradoweck/antigravity-awesome-skills' "$d" && git -C "$d" checkout --quiet '2984de11956e413008c6f98121cd141c499e47a3' -- 'skills/web2-recon' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/web2-recon' ~/.agents/skills/'web2-recon' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'web2-recon' ~/.claude/skills/'web2-recon' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for iradoweck/antigravity-awesome-skills shows the score of its lowest-scoring skill.

SkillTrust badge for iradoweck/antigravity-awesome-skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/iradoweck/antigravity-awesome-skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/iradoweck/antigravity-awesome-skills/)

Score history

Date	Version	Score
2026-11-08	`2984de1`	67
2026-11-06	`2984de1`	57